THE PLATFORM
Explore what Secrato does today
Put the guidance into practice. Here is what already runs for teams across Europe.
Devices & Personnel Management
Keep devices and people connected to the controls that govern them.
Trust Network
Present selected security and compliance information to external stakeholders.
NEW EVERY MONTH
Compliance knowledge built for Europe, all in one place
A growing library of guides, playbooks, templates and insights for EU compliance and security teams, built by European experts, not adapted from elsewhere. New items are added every month.
COMING SOON
Whitepapers
Research-led guidance on EU regulatory frameworks and compliance strategy.
NEW MONTHLY
Guides & Playbooks
Practical, step-by-step guidance for NIS2, CyFun, the Cbw, DORA, the CRA and incident response.
NEW MONTHLY
Blog & Insights
Perspectives on the evolving EU regulatory landscape.
NEW
Templates & Tools
Ready-to-use templates that accelerate your compliance programme.
COMING SOON
Customer Stories
How European organisations use Secrato to manage risk and compliance.
COMING SOON
Webinars & Events
Live sessions with compliance and security experts across Europe.
What’s new
The latest guides, playbooks, templates and insights, newest first.
Guides · Playbooks
Step-by-step guidance and operational playbooks, with extra attention for Belgium, the Netherlands and Luxembourg. A new one every month.
Security logging and monitoring (SIEM, SOC, MDR) as evidence
A practical guide to security logging, SIEM and SOC or MDR services: what to log, retention, detection use cases, alert triage and how to show supervisors…
Read article →Cyber Resilience Act step by step: readiness for manufacturers
A practical CRA readiness path for manufacturers: confirm scope and classification, close Annex I gaps, run vulnerability handling and reporting, and plan conformity assessment and CE…
Read article →Cyberbeveiligingswet (Cbw): a step-by-step compliance guide
The Cbw and the Cyberbeveiligingsbesluit have applied since 15 August 2026. This guide takes you from scoping and NCSC registration to the zorgplicht, meldplicht and board…
Read article →One incident, four clocks: NIS2, DORA, CRA and GDPR reporting
A single cyber incident can trigger four reporting clocks. This playbook compares the deadlines, walks you through classification and lists the Belgian, Dutch and Luxembourg recipients.
Read article →Cyber tabletop exercise playbook: plan, run and evidence it
A step-by-step playbook to plan, facilitate and evaluate a cyber tabletop exercise, and turn the after-action report into evidence for NIS2, DORA and CyFun.
Read article →NIS2 in Belgium: a step-by-step compliance guide
A practical route through the Belgian NIS2 Law: confirm scope, register with the CCB, choose a CyFun level or ISO/IEC 27001, report incidents and pass the…
Read article →NIS2 scope check: are you an essential or important entity?
A documented, step-by-step scope decision for NIS2: sector mapping, size-cap and group counting, size-independent rules, essential or important, jurisdiction, and where to register in the Benelux.
Read article →Incident response playbook aligned to NIST SP 800-61r3 and NIS2
A practical incident response playbook built on NIST SP 800-61r3 and NIS2, with roles, a severity matrix, evidence rules and a clear path from detection to…
Read article →Ransomware response playbook: the first hour, 24 hours and 72 hours
A timed ransomware playbook: what to do in the first hour, the first 24 hours and the first 72 hours, from isolation and evidence to reporting,…
Read article →DORA step by step for financial entities in the Benelux
A practical DORA path for banks, insurers, payment institutions and asset managers in Belgium, the Netherlands and Luxembourg, from ICT risk governance to major incident reporting.
Read article →Blog & Insights
Regulatory updates and practical guidance for security, risk and compliance teams. A new selection every day.
NIS2 in Late 2026: Transposition Status, Supervisor Expectations and the Belgian Model
Two years after the NIS2 deadline, most Member States have national laws in force and supervisors have moved from awareness to verification. Here is where things…
Read article →Third-party risk management in 2026: from questionnaire fatigue to continuous assurance
Supplier questionnaires are multiplying while regulators ask for more than paperwork. Here is how to rebalance third-party risk management around concentration risk, continuous monitoring and published…
Read article →Continuous compliance: from annual audits to continuous control monitoring
Annual audits show how controls looked on the day of the audit. Continuous control monitoring shows whether they work the rest of the year, provided you…
Read article →ISO/IEC 27001:2022 After the Transition: What Auditors Look For and How to Stay Audit-Ready
Since 31 October 2025, every accredited ISO/IEC 27001 certificate refers to the 2022 edition. With transition audits behind them, certification bodies are testing whether the new…
Read article →Why Compliance and GRC Are Essential for Business Success in 2026
Compliance is no longer only about passing audits. Treating governance, risk and compliance as one function gives leadership a single, current view of risk.
Read article →AI Governance in 2026: Best Practices for Secure and Compliant AI
AI brings real opportunity and new risk. These are the governance building blocks that keep AI use secure, compliant and accountable.
Read article →Why Third-Party Risk Management Is a Business Priority in 2026
Suppliers and service providers are now part of your attack surface. Here is why third-party risk management has become a business priority.
Read article →The Biggest GRC Trends Shaping 2026
From AI governance to continuous monitoring and expanding cyber regulation, these are the GRC trends shaping how organisations work in 2026.
Read article →Templates · Tools
Ready-to-use registers, checklists and plans in one consistent Secrato format. Each template completes one of our guides and is free to use within your organisation.
NIS2 Belgium readiness checklist
A working checklist for the Belgian NIS2 Law. It runs from the scope decision and CCB registration through CyFun or ISO/IEC 27001 implementation to…
Get the template →Cbw readiness checklist
A working checklist for the Dutch Cyberbeveiligingswet and Cyberbeveiligingsbesluit. It covers scoping, NCSC registration, every Cbb duty of care measure, the reporting duty and…
Get the template →NIS2 scope decision worksheet
A worksheet that takes each legal entity through the NIS2 scope test, from sector mapping to registration. It records the facts, the rule applied…
Get the template →Incident notification decision and timeline sheet
A working sheet for the first hours of an incident. It walks the reporting lead through the NIS2, DORA, CRA and GDPR classification questions,…
Get the template →Build the future of GRC together
Questions about NIS2, CyFun, DORA or the CRA? Our team is happy to answer them directly.
